Repository Index

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

• application-security
• bug-bounty
• bug-bounty-hunting
• cybersecurity

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

• ai-agents
• bug-bounty
• electron
• offensive-security